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IN THE CLAIMS: 

The text of all pending claims, (including withdrawn claims) is set forth below. Cancelled 
and not entered claims are indicated with claim number and status only. The claims as listed 
below show added text with underlining and deleted text with str i kethrough . The status of each 
claim is indicated with one of (original), (currently amended), (cancelled), (withdrawn), (new), 
(previously presented), or (not entered). 

1. (Currently amended) An encryption device comprising XOR means and nonlinear 
transform means, said encryption device further comprising: 

a^random number generator m e ans for generating a random numbe r h. where h is an 
integer between zero and q-1 ; 

q sets of fixed values, where g is eguai to two, wherein equations, FM n h = Ch XOR 
L1n(FI\/lin). Ch = Chifi Chi>..Ch n. and Dh = dhifi d hi4...dhn. are satisfied, where FMih^is the i-th fixed 
value of the h-th set of said g sets of fixed values, where i is an integer and i is an integer. 

g sets of fixed values, wherein eguations, (cnj XOR C i j) = (0101. ..01)2 or (1010. ..10)2 
and (d n j XOR d -i j) = (0101 ...01)2 or (1010.. .10)2 are satisfied, a fixed table before masking is 
defined as Sfxi. and i-th masked fixed table is defined as Sjfx XOR cijl XOR dij for the i-th fixed 
value. 

g is an int e ger linear transform means L1i(x). and linear transform means L2i(x). wherein 
the linear transform means LI i(x). the nonlinear transform means with the masked fixed table S| 
[x1 and the linear transform means L2i(x) operate in i-th one of rounds: and 

a first selector for selecting one fixed value of the h-th set of said q sets of fi xed values in 
response to the random numb e r: number h: 

said XOR means XORing an input thereto with an XOR of a key with said selected fixed 

value. 

2. (Cancelled) 

3. (Currently amended) The encryption device according to claim 1 , further comprising: 
an encrypting unit comprising said first XOR means and said nonlinear transform means; 
second XOR means for XORing an input to said encryption device with a fixed value 

selected in response to the random numberJi; and 

third XOR means for XORing an output from said encrypting unit with the fixed value 
selected in response to the random number h. 



4 



Serial No. 10/028,265 



4. (Currently amended) An encryption device comprising XOR means and nonlinear 
transform means, said encryption device further comprising: 

a_random number generator meaws-for generating a random numbe r h. where h is an 
integer between zero and a-1 : 

q sets of fixed values s e ts of mask e d f i x e d tab le s , where q is an i nt e g e r; and integer equal 
to three or more, wherein equations. FMih = Cj^XOR L1i(L2h1(Dh)) for i>1. Ch = ChifiChi4...Ch n. 
and D h = d h ifidh id...dj^. where i is an integer and i is an integer. 

g sets of fixed values, wherein eguations. (CnjXOR c^) = (01 01. ..01)2 or (1010.. .10^2 
and (d n j XOR d^) = (0101.. .01)2 or (1010. ..10)2 are satisfied, a fixed table before masking is 
defined as Sfxl. and i-th masked fixed table is defined as Sjfx XOR Cijl XOR dy for the i-th fixed 
value: 

linear transform means L1i(x) and linear transform means L2i(x). wherein the linear 
transform means L1i(x). the nonlinear transform means with the masked fixed table Sj fxl and the 
linear transform means L2i(x) operate in i-th one of rounds: and 

a first selector for selecting one fixed value of the h-th set of said g sets of fixed values of 
said q sets of fixed tables in response to the random numb e r. number h. 

said XOR means XORing an input thereto with an XOR of a key with said selected fixed 
value, said non li n e ar transform moans non l in e ar l y transforming an i nput th e r e to i n accordanco 
w i th said s e l e ct e d s e t of fix e d tabl e s . 

5-7. (Cancelled) 

8. (Currently amended) TheAn encryption device accord i ng to c l aims, 
wh e ro i n comprising XOR means and nonlinear transform means, said encrvption device further 
comprising: 

a random number generator for generating a random number h. where h is an integer 
between zero and g-1 : 

g sets of fixed values, where g is an integer egual to three or more, wherein eguations, 
FMn^ = Cj^XOR L1n (FMin). Cj^= ChiRC^i...Chn. and Dj,= dhifidhiA...djw>. are satisfied, where 
FMi ^ is the i-th fixed value of the h-th set of said g sets of fixed values, where i is an integer and i 
is an integer. 

a n e guat i on. g sets of fixed values, wherein equations, (c n j XOR C i j) v (Cij XOR C9j) v...v 
(CO-. I XOR ca-. j) = (111... 11)2 and {do^>XOR-d4^)-y-(d4 ^ XOR d^) U...U (dq ^ XOR dq 
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(1 1 1 1 1 1 1 1 )2. i o (dn j XOR di jW Ml I XOR do v. .. v (da-, ; XOR da-, = M 1 1 . . . 1 1 )2 are 
satisfied.whefe a fixed table before masking is defined as S[x], and i-th masked fixed table is 
defined as Sjfx XOR Cijl XOR d^ j for the i-th fixed value: 

linear transform means L1i(x) and linear transform means L2i(x). wherein the linear 
transform means L1i(x), the nonlinear transform means with the masked fixed table S] [x1 and the 
linear transform means L2i(x) operate in i-th one of rounds: and 

a first selector for selecting one fixed value of the h-th set of said q sets of fixed values in 
response to the random number h. 

said XOR means XORing an input thereto with an XOR of a key with said selected fixed 

value 

a j - th masked table i s d e fin e d as Sj[xXOR c^] XOR dy (j - 0, 1, ... 15) . 

9. (Currently amended) The encryption device according to claim 4, said nonlinear 
transform means being Subbyte means; 

the linear transform means L1i(x) said e ncryption dev i ce further comprising means for 
shifting an input, and the linear transform means L2i(x) comprising means for mixedcolumning 
an input. 

10-15 (Cancelled) 

16. (Currently amended) An encryption device comprising a^random number generator 
meaRS-for generating a random number h. where h is an integer between zero and a-1. and a 
first plurality of encrypting rounds, wherein 

i-th one e a€h-of said plurality of encrypting rounds comprises nonlinear transform means 
for nonlinearly transforming an input thereto, and XOR means for XORing a first input thereto 
with a second input thereto , for that round, where i is an integer : 

the second input to said XOR means is coupled to an output of said nonlinear transform 
means; and 

said nonlinear transform means comprises: 

g sets of fixed values, where g is egual to two, wherein eouations. FM n h = C h^XOR Lin 
(FMin). Cj. = ChisC ^, f...CMj. and Dh = dhifidhi/i...d>^n. are satisfied, where FMj h is the i-th fixed 
value of the h-th set of said g sets of fi xed values, where q is an intogor i is an integer. 

g sets of fixed values, wherein equations. (C n j XOR C i |) = (0101 ...01)2 or (1010.. .10)2 
and (dn| XOR d^) = (0101 ...01)2 or (1010.. .10)2 are satisfied, a fixed table before masking is 
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defined as SFxl and i-th masked fixed table is defined as Sjfx XOR Cyl XOR dy for the i-th fixed 
value: 

a selector for selecting one of said q sets of f ixed values in response to the random 
numberJi; and 

further XOR means for XORing an input thereto with an XOR of a key with said selected 
fixed va l u e . value: 

linear transform means L1i(x): 

a plurality of nonlinear transform means for nonlinearlv transforming an input in 
accordance with a fixed table: 

linear transform means L2i(x), wherein the linear transform means L1j(x), the nonlinear 
transform means with the masked fixed table S] M and the linear transform means L2iM operate 
in that round: and 

a selector for selecting one of said plurality of nonlinear transform means. 

17. (Cancelled) 

18. (Currently amended) The encryption device according to claim 4716, wherein 
the fixed tables of said respective nonlinear transform means in said respective 

encrypting rounds are identical. 

19. (Original) The encryption device according to claim 16, wherein 

a mask is canceled over subsequent ones of said plurality of encrypting rounds. 

20. (Original) The encryption device according to claim 16, wherein 

masking is performed in each of a second plurality of encrypting rounds of said first 
plurality of encrypting rounds, said second plurality being smaller than said first plurality. 

21 . (Currently amended) An encryption device comprising a random number 
generatormeafts for generating a random numb e r, and a number h. where h is an integer 
between zero and g-1 , and a first plurality of encrypting rounds, wherein 

i'th one e aeh-of said plurality of encrypting rounds comprises nonlinear transform means 
for nonlinearly transforming an input thereto for that round, where i is an integer: and 

th e r e to; and X OR means for XORing a first input thereto and a second input thereto; 
the second input to said XOR means is coupled conn e ct e d t o an output of said nonlinear 
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transform means; and 

said nonlinear transform means comprises i ther e in non li n e ar transfomi moans for 
non l in e ar l y transforming an i nput th e r e to i n aooordano e with a f i x e d tabl e and in aooordano e w i th 
th e random numb e r 

a sets of fixed values, where q is equal to two, wherein equations, FMih = Cj^XOR 

L1i(L2i-1(Dh)) for C h = ChifiChiA...C hn , and Dj h ^= dj jjifidjjji4...djw ), are satisfied, where FMihis 
the i-th fixed value of the h-th set of said q sets of fixed values, where 1 is an integer. 

q sets of fixed values, wherein equations. (Cnj XOR Cij) = (01 01. ..01)2 or (1010.. .10)2 
and (d n jXOR d i j) = (0101. ..01)2 or (1010. ..10)2 are satisfied, a fixed table before masking is 
defined as Sfxl and i-th masked fixed table is defined as SJx XOR Cijl XOR dij for the i-th fixed 
value: 

a selector for selectinq one of said q sets of fixed values in response to the random 
number h: 

further XOR means for XORing an input thereto with an XOR of a key with said selected 
fixed value: 

linear transform means L1i(x). 

a plurality of nonlinear transform means for nonlinearlv transforming an input in 
accordance with a fixed table: 

linear transform means L2i(x), wherein the linear transform means L1i(x). the nonlinear 
transform means with the masked fixed table Sj Txl and the linear transform means L2i(x) operate 
in that round: and 

a selector for selectinq one of said plurality of nonlinear transform means. 
22-24 (Cancelled) 

25. (Currently amended) A program stored on a storage medium for use in an encryption 
device, said program operable to effect the steps of: 

selecting one of q sets of fi xed values, where q is an int e q e r equal to two, in response to 
a random numbe r h. where h is an inteqer between zero and q-1 : 

XORing an input value with an XOR of a key with said selected fixed va l ue; 

value in i-th one of rounds, wherein equations. FMnh = Cj^XOR Lin (FMin). Ch= c 
h isCh i. .C j wj, and D h = d j^dj^...djw j. are satisfied, where FMi h is the i-th fixed value of the h-th 
set of said q sets of fixed values, where i is an integer and i is an integer: 

selecting one set Sj fxl of q sets of masked fixed tables in response to the random 
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numb e r; and 

number h in that round, wherein equations. (Cf^XOR Cjj) = (0101 .,.01)2 or (1010.. .10)2 
and (d^XOR dij) = (0101. ..01)2 or (1010.. .10)2 are satisfied, a fixed table before maskino is 
defined as SFxI. and i-th masked fixed table is defined as Sjfx XOR Cyl XOR dij for the i-th fixed 
value: 

nonlinearly transforming an input value in accordance with said selected set of fix e d 
teble& rSj [x1 of fixed tables in that round: and 

linearly transforming the nonlinearly transformed value in that round. 

26-28. (Cancelled) 

29. (New) The encryption device according to claim 1 , characterized in that the linear 
transform means L1 j(x) is defined as LI i(x) = x. 

30. (New) The encryption device according to claim 1, characterized in that the linear 
transform means L2i(x) is defined as L2i(x) = MixedColumn(Shift(x)). 

31 . (New) The encryption device according to claim 1 , characterized in that the linear 
transform means L2j(x) is defined as Shift(x). 

32. (New) The encryption device according to claim 4, characterized in that the linear 
transform means L1j(x) is defined as L1i(x) = x. 

33. (New) The encryption device according to claim 4, characterized in that the linear 
transform means L2i(x) is defined as L2i(x) = MixedColumn(Shift(x)). 

34. (New) The encryption device according to claim 4, characterized in that the linear 
transform means L2i(x) is defined as Shift(x) 

35. (New) The encryption device according to claim 8, characterized in that the linear 
transform means L1j(x) is defined as L1j(x) = x. 

36. (New) The encryption device according to claim 8, characterized in that the linear 
transform means L2|(x) is defined as L2j(x) = MixedColumn(Shift(x)). 



9 



Serial No. 10/028,265 



37. (New) The encryption device according to claim 8, characterized in that the linear 
transform means L2i(x) is defined as Shift(x) 

38. (New) An encryption device comprising XOR means and nonlinear transform means, 
said encryption device further comprising: 

a random number generator for generating a random number h, where h is an integer 
between zero and q-1 ; 

q sets of fixed values, where q is an integer three or more, wherein equations, FMi^ = Ch 
XOR L1i(L2i-1(Dh)) for i^1, Ch^= Ch.i5Ch.i4...Ch.o, and Dh_= dh.i5dh.i4...dh,o. are satisfied, where i 
is an integer and j is an integer, 

q sets of fixed values, where equations, (Cqj XOR Cij)v(Cij XOR C2,j)v...v(cq-2j XOR cq- 
ij) = (1111. ..11)2 and (doj XORdij)v(dij XOR d2j)v ...v(dq-2j XOR dq-ij) = (1111. ..11)2, are 
satisfied, and a fixed table before masking is defined as S[x] and an i-th masked fixed table is 
defined as Sj[x XOR ch,j] XOR dh,j for the j-th fixed value; 

linear transform means L1j(x) and linear transform means L2i(x), wherein the linear 
transform means L1i(x), the nonlinear transform means with the masked fixed table Sj [x] and the 
linear transform means L2i(x) operate in i-th one of rounds; and 

a first selector for selecting one fixed value of the h-th set of said q sets of fixed values in 
response to the random number h; 

said XOR means XORing an input thereto with an XOR of a key with said selected fixed 

value. 

39. (New) The encryption device according to claim 38, characterized in that the linear 
transform means L1i(x) is defined as L1i(x) = x. 

40. (New) The encryption device according to claim 38, characterized in that the linear 
transform means L2j(x) is defined as L2j(x) = MixedColumn(Shift(x)). 

41 . (New) The encryption device according to claim 38, characterized in that the linear 
transform means L2i(x) is defined as Shift(x). 

42. (New) An encryption device comprising XOR means and nonlinear transform means, 
said encryption device further comprising: 
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a random number generator for generating a random number h, where h is an integer 
between zero and q-1 ; 

q sets of masked fixed values and q sets of fixed tables, where q Is equal to two, wherein 
equations, FMo.h = ChXOR L1o (FMin), Cu_= Ch.i5Ch.i...Ch.o. and Dh = dh.i5dh.i4...dh.o, are 
satisfied, where FMj.h is the i-th fixed value of the h-th set of said q sets of fixed values, where i is 
an integer and j is an integer, 

q sets of fixed values, wherein equations, (coj XOR Cij) = (01 01. ..01)2 or (1010.. .10)2 
and (doj XOR dij) = (0101. ..01)2 or (1010...10)2 are satisfied, a fixed table before masking is 
defined as S[x], and i-th masked fixed table is defined as S][x XOR qj XOR dij for the j-th fixed 
value; 

a selector for selecting one of said q sets of fixed tables in response to the random 
number h, 

said nonlinear transform means nonlinearly transforming an input thereto in accordance 
with said selected set of fixed tables; and 

a plurality of encrypting rounds, wherein i-th one of said plurality of encrypting rounds 
comprises the XOR means, the fixed tables, the selector, linear transform means L1i(x) and 
linear transform means L2j(x), for that round, and wherein the fixed tables for said plurality of 
respective encrypting rounds are identical, and wherein the linear transform means L1i(x), the 
nonlinear transform means with the masked fixed table Sj [x] and the linear transform means 
L2j(x) operate in that round. 

43. (New) The encryption device according to claim 42. characterized in that the linear 
transfomn means L1j(x) is defined as L1i(x) = x. 

44. (New) The encryption device according to claim 42, characterized in that the linear 
transform means L2i(x) is defined as L2i(x) = MixedColumn(Shift(x)). 

45. (New) The encryption device according to claim 42, characterized in that the linear 
transform means L2i(x) is defined as Shift(x). 

46. (New) An encryption device comprising XOR means and nonlinear transform means, 
said encryption device further comprising: 

a random number generator for generating a random number h. where h is an integer 
between zero and q-1 ; 
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q sets of masked fixed values and q sets of fixed tables, where q is equal to two, wherein 

equations. FMj.h = C h.XOR L1 l(L2i-1 (Dh)) for i^1 , C ts_= c h.isC h.i4. • . c h.o. and D ^= dh.i5d h.i4. . . d h.o. 

are satisfied, where FMi h is the i*th fixed value of the h-th set of said q sets of fixed values, 

where i is an integer and j is an integer, 

q sets of fixed values, wherein equations, (Coj XOR Cij) = (0101. ..01)2 or (1010.. .10)2 

and (doj XOR dij) = (0101. ..01)2 or (1010.. .10)2 are satisfied, a fixed table before masking is 

defined as S[x], and i-th masked fixed table is defined as Sj[x XOR Cg] XOR djj for the j-th fixed 

value; 

a selector for selecting one of said q sets of fixed tables in response to the random 
number h, 

said nonlinear transform means nonlinearly transforming an input thereto in accordance 
with said selected set of fixed tables; and 

a plurality of encrypting rounds, wherein i-th one of said plurality of encrypting rounds 
comprises the XOR means, the fixed tables, the selector, linear transform means L1i(x) and 
linear transform means L2i(x), for that round, and wherein the fixed tables for said plurality of 
respective encrypting rounds are identical, and wherein the linear transform means L1i(x), the 
nonlinear transform means with the masked fixed table Sj [x] and the linear transform means 
L2j(x) operate in that round. 

47. (New) The encryption device according to claim 46, characterized in that the linear 
transform means L1i(x) is defined as L1i(x) = x. 

48. (New) The encryption device according to claim 46, characterized in that the linear 
transform means L2j(x) is defined as L2j(x) = MixedColumn(Shift(x)). 

49. (New) The encryption device according to claim 46, characterized in that the linear 
transform means L2j(x) is defined as Shift(x). 

50. (New) An encryption device comprising XOR means and nonlinear transform means, 
said encryption device further comprising: 

a random number generator for generating a random number h, where h is an integer 
between zero and q-1 ; 

q sets of masked fixed values and q sets of fixed tables, where q is an integer equal to 
three or more, wherein equations, FMo.h = Ch^XOR Llo (FMin), C h^= Ch.i5Ch.i ..Ch.o, and Dh^= d 
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h.i5cl h.i4 . .cl h,o, are satisfied, where FMj.h is tlie i-th fixed value of the h-th set of said q sets of 
fixed values, where i is an integer and j is an integer, 

q sets of fixed values, wherein equations, (Coj XOR Cij) v (ci j XOR Caj) v...v (cq-2j XOR 
cq-ij) = (111 ...11)2 and (doj XOR dij) v (dij XOR dsj) v...v (dq-2j XOR dq-ij) = (111 ...11)2 are 
satisfied, a fixed table before masking is defined as S[x], and i-th masked fixed table is defined 
as Sj[x XOR Cij] XOR d|j for the j-th fixed value; 

a selector for selecting one of said q sets of fixed tables in response to the random 
number h, 

said nonlinear transform means nonlinearly transforming an input thereto in accordance 
with said selected set of fixed tables; and 

a plurality of encrypting rounds, wherein i-th one of said plurality of encrypting rounds 
comprises the XOR means, the fixed tables, the selector, linear transform means L1i(x) and 
linear transform means L2i(x), for that round, and wherein the fixed tables for said plurality of 
respective encrypting rounds are idenfical, and wherein the linear transform means L1i(x), the 
nonlinear transform means with the masked fixed table Sj [x] and the linear transform means 
L2j(x) operate in that round. 

51 . (New) The encryption device according to claim 50, characterized in that the linear 
transform means L1j(x) is defined as L1j(x) = x. 

52. (New) The encryption device according to claim 50, characterized in that the linear 
transform means L2i(x) is defined as L2i(x) = MixedColumn(Shift(x)). 

53. (New) The encryption device according to claim 50, characterized in that the linear 
transform means L2i(x) is defined as Shift(x). 

54. (New) An encryption device comprising XOR means and nonlinear transform means, 
said encryption device further comprising: 

a random number generator for generating a random number h, where h is an integer 
between zero and q-1 ; 

q sets of masked fixed values and q sets of fixed tables, where q is an integer equal to 
three or more, wherein equations, FM|,h = Ch_XOR L1i(L2i-1(Dh)) for i>1, Ch^= Ch,i5Ch.i4...Ch.o, 
and D h^= d h.isd h,i4. • . d h.o, are safisfied, where FMj,h is the i-th fixed value of the h-th set of said q 
sets of fixed values, where i is an integer and j is an integer, 
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q sets of fixed values, wherein equations, (Coj XOR Cij) v (Cij XOR C2j) v...v (cq-2,j XOR 

cq-i.j) = (111 ...11)2 and (doj XOR di.|) v (dij XOR dsj) v...v (dq-jj XOR dq-ij) = (111 ...11)2 are 

satisfied, a fixed table before masking is defined as S[x], and i-th masked fixed table is defined 

as Sj[x XOR Cjj] XOR d.j for the j-th fixed value; 

a selector for selecting one of said q sets of fixed tables in response to the random 

number h, 

said nonlinear transform means nonlinearly transforming an input thereto in accordance 
with said selected set of fixed tables; and 

a plurality of encrypting rounds, wherein i-th one of said plurality of encrypting rounds 
comprises the XOR means, the fixed tables, the selector, linear transform means L1i(x) and 
linear transform means L2i(x), for that round, and wherein the fixed tables for said plurality of 
respective encrypting rounds are identical, and wherein the linear transform means L1|(x), the 
nonlinear transform means with the masked fixed table Sj [x] and the linear transform means 
L2j(x) operate in that round. 

55. (New) The encryption device according to claim 54, characterized in that the linear 
transform means L1|(x) is defined as L1j(x) = x. 

56. (New) The encryption device according to claim 54, characterized in that the linear 
transform means L2i(x) is defined as L2i(x) = MixedColumn(Shift(x)). 

57. (New) The encryption device according to claim 54, characterized in that the linear 
transform means L2j(x) is defined as Shift(x). 

58. (New) The encryption device according to claim 16, characterized in that the linear 
transform means L1i(x) is defined as L1i(x) = x. 

59. (New) The encryption device according to claim 16, characterized in that the linear 
transform means L2j(x) is defined as L2i(x) = MixedColumn(Shift(x)). 

60. (New) The encryption device according to claim 16, characterized in that the linear 
transform means L2i(x) is defined as Shift(x). 

61. (New) The encryption device according to claim 21 , characterized in that the linear 
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transform means L1i(x) is defined as L1j(x) = x. 

62. (New) The encryption device according to claim 21 , characterized in that the linear 
transform means L2i(x) is defined as L2i(x) = MixedColumn(Shift(x)). 

63. (New) The encryption device according to claim 21 . characterized in that the linear 
transform means L2i(x) is defined as Shift(x). 

64. (New) An encryption device comprising a random number generator for generating a 
random number h, where h is an integer between zero and q-1 , and a first plurality of encrypting 
rounds, wherein 

i-th one of said plurality of encrypting rounds comprises nonlinear transform means for 
nonlinearly transforming an input thereto, and XOR means for XORing a first input thereto with a 
second input thereto for that round, where i is an integer; 

the second input to said XOR means is coupled to an output of said nonlinear transform 
means; and 

said nonlinear transform means comprises: 

q sets of fixed values, where q is an integer equal to three or more, wherein equations, 
FMo,h = C h XOR L1 0 (FMin), 0 h = c h.isCh.i . . . c h,o, and D h = d h.isd h.i4. • • d h.o, are satisfied, where 
FMi,h is the i-th fixed value of the h-th set of said q sets of fixed values, where j is an integer, 

q sets of fixed values, wherein equations. (Coj XOR Ci j) v (ci j XOR C2j) v...v (cq-2,j XOR 
cq-ij) = (111 ... 11)2 and (doj XOR dij) v (di j XOR dzj) v...v (dq-2j XOR dq-i j) = (111 ... 11)2 are 
satisfied, a fixed table before masking is defined as S[x], and i-th masked fixed table is defined 
as Sj[x XOR Cij] XOR dg for the j-th fixed value; 

a selector for selecting one of said q sets of fixed values in response to the random 
number h; 

further XOR means for XORing an input thereto with an XOR of a key with said selected 
fixed value; 

linear transform means L1j(x); 

a plurality of nonlinear transform means for nonlinearly transforming an input in 
accordance with a fixed table; 

linear transform means L2i(x), wherein the linear transform means L1i(x), the nonlinear 
transform means with the masked fixed table Sj [x] and the linear transform means L2i(x) operate 
in that round; and 
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a selector for selecting one of said plurality of nonlinear transform means. 

65. (New) The encryption device according to claim 64, characterized in that the linear 
transform means L1i(x) is defined as L1i(x) = x. 

66. (New) The encryption device according to claim 64, characterized in that the linear 
transform means L2|(x) is defined as L2j(x) = MixedColumn(Shift(x)). 

67. (New) The encryption device according to claim 64, characterized in that the linear 
transform means L2i(x) is defined as Shift(x). 

68. (New) An encryption device comprising a random number generator for generating a 
random number h, where h is an integer between zero and q-1 , and a first plurality of encrypting 
rounds, wherein 

i-th one of said plurality of encrypting rounds comprises nonlinear transform means for 
nonlinearly transforming an input thereto, and XOR means for XORing a first input thereto with a 
second input thereto for that round, where i is an integer; 

the second input to said XOR means is coupled to an output of said nonlinear transform 
means; and 

said nonlinear transform means comprises: 

q sets of fixed values, where q is an integer equal to three or more, wherein equations, 
FMi,h = Ch XOR L1i(L2i-1(Dh)) for i^1, Ch = Ch.i5Ch.i4...Ch.o. and Dh = dh.i5dh.i4...dh.o. are 
satisfied, where FMi h is the i-th fixed value of the h-th set of said q sets of fixed values, where j is 
an integer, 

q sets of fixed values, wherein equations, (Coj XOR Ci j) v (ci j XOR C2j) v...v (cq-2j XOR 
cq-ij) = (111. ..11)2 and (doj XOR dij) v (dij XOR dzj) v...v (dq-2.j XOR dq-ij) = (111. ..11)2 are 
satisfied, a fixed table before masking is defined as S[x], and i-th masked fixed table is defined 
as Sj[x XOR Cjj] XOR djj for the j-th fixed value; 

a selector for selecting one of said q sets of fixed values in response to the random 
number h; 

further XOR means for XORing an input thereto with an XOR of a key with said selected 
fixed value; 

linear transform means L1i(x); 

a plurality of nonlinear transform means for nonlinearly transforming an input in 
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accordance with a fixed table; 

linear transform means L2i(x), wherein the linear transform means L1j(x), the nonlinear 
transform means with the masked fixed table Sj [x] and the linear transform means L2|(x) operate 
in that round; and 

a selector for selecting one of said plurality of nonlinear transform means. 

69. (New) The encryption device according to claim 68, characterized in that the linear 
transform means L1i(x) is defined as L1i(x) = x. 

70. (New) The encryption device according to claim 68, characterized in that the linear 
transform means L2|(x) is defined as L2i(x) = MixedColumn(Shift(x)). 

71 . (New) The encryption device according to claim 68, characterized in that the linear 
transform means L2i(x) is defined as Shift(x). 

72. (New) A program stored on a storage medium for use in an encryption device, said 
program operable to effect the steps of: 

selecting one set of q sets of fixed values, where q is an integer equal to three or more, 
in response to a random number h, where h is an integer between zero and q-1 ; 

XORing an input value with an XOR of a key with said selected fixed value in i-th one of 
rounds, wherein equations. FMo.h = Ch XOR Llo (FMin), Ch = Ch,i6Ch.i".Ch.o, and Dh = d h,i5d 
h.i4 - .d h.o, are satisfied, where FMj,h is the i-th fixed value of the h-th set of said q sets of fixed 
values, where i is an integer and j is an integer; 

selecting one set Sj [x] of q sets of masked fixed tables in response to the random 
number h in that round, wherein equations, (coj XOR Cij) v (Cij XOR C2j) v...v (cq-2j XOR cq-ij) 
= (111 ... 11)2 and (doj XOR dij) v (di j XOR dsj) v...v (dq-2.j XOR dq-ij) = (111 ... 11)2 are satisfied, 
a fixed table before masking is defined as S[x], and i-th masked fixed table is defined as Sj[x 
XOR Cij] XOR djj for the j-th fixed value; 

nonlinearly transforming an input value in accordance with said selected set Sj [x] of fixed 
tables in that round; and 

linearly transforming an input value and the nonlinearly transformed value in that round. 
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